201210031421 10vyo2
explained decrypted filler
3DES(name+title) ECB, 44 GUIDs, seed 522
From the post to its content
As posted (encrypted)
AD285FB259DF6183 6944FB5FC5D6893D B27B43EE0499D6D6 9C1C7EF49290D1A8 DD047E8A66E7965E 6E95C8F3CB3782B1 9C9DFC1787EA7111 E7945C2B2E7F156C 509B16B7A10A27D6 735F141A327AE56E 9BA4B631C8D4EC98 3B60FCF020348A4F 86CE356C1A64541D 1F597C3F018B8880 5F2E3F81AE997923 8F19D3F35F8A9BA6 5F47DC156537F58A 2B80A1D54AFAAC35 45EA7224D8CEF137 B95D9E6CADD2FDDC C3C0A71962AD5561 A6E79476F06C4108 34D5D0CB54B9FE9D 37CD8A721E4B8513 B7A67FDC44815D33 8EA336D9FF9F9D45 A6194DF097ACCAC4 9E82155069294656 554C1F1A961A6B36 CCB33502DA63A89A 8137D748690EBE2C 7B6B1268115C8C49 0CDCC745601A6D7B D770AF1BC3CDF58A 1117327308C8008F 9E63E5AB3F4CB59C B70BC33C92B6CCEF 9EC332891F1452A0 B9BF05453AC286BF D814F11AFCC71884 90C328B0AB9093BF 5E8B25274AA8F7BA 9FBFB95897E67B5D C9A0DBE31B531833 F455071FBF722565 D7760C9B513E5C71 10AFA35879F13E56 E3E6A4D390F856BA 4362AC77BBC52698 ADD31CA61E5D7947 6B2958DE55AF5466 E7A72188BAD55510 57FDBB42E84D6773 01AC6EB33AD6D9DE 064D135327DC06C9 390D5494ABBDC736 0956CCE8C7B037D8 9B05BA8EBD342B37 503B4E9A9A6821F7 5E56FCC49BC4DFD1 6F55C515D7772847 1BE88E43B441F902 F4B1074C2003AE38 7AF8AF4161BA4AB7 98DC2ACE2BEF0EF2 5F70482D2452A62D 880BF73DA0EA44A5 639E2D2D9C2FC826 2E213684FFD5A4F5 C38622C27A5B46DE CAB563E8C9148FAE 1EFFC9A1D551BCFD F08E8E66D247C3CC 3C47E7617F5A0376 1C2C5CC310D6E48E AC42D9EEA51405F8 2029C9D3082F218A 7306EDFFF9CEE0CA 803357178CAB43DF 56270A78DBA9F51D 83889F8A71F67704 6BABF6C6F88DFE04 23DB9CCF43CB41F6 585353F2D8A20CFC CEC336C92CF5887A 94604992FB97DA3A 1BE8D2C6D3FF3957 6FDAFB15E883A263 09B0A2044E913BC3 0B310920F2B17F7A 848D1B0F99B67C9D C9160649A6E5F762 CFB069741AFCD60D 4EB892095A0292EB 386E08E1A03A7CA4 E17C57BAAD6F7502 5639CC2F21C19776 0D704FB23B89395D C1A576AEB94B90D1 D094423B55BC304A 078F7463E43BFC92 5DCFAC290608B299 C81BF48442CD11AB 10593B844EDFC3B4 FBC20519E13BC375 139A191FAF860470 0FF4F5C20CE33D5F 8BB599DF099C218F 2201AB3A6F742392 29C38DFCE6852ACF 5FC13C720F897143 7C4202906D280161 F412FCE8C4C63159 8311E3FB49D1A454 C3C90D3272C2A52E 527BCC48C95B5640 414A0A204E5674E3 E40BE31F556F998B BF921A7DDD1A6C14 66CF90B08316E110 F21CDDC93E21894F 38AD6A86F4A1718F F83E912A2F2F28BA 0CC41E3402AB3F4A 65488F7DB95B5509 CB8A148FE21524B7 7768F9772BB4D24B CDFC5C901C5D22E2 B27599F59C75E4DD 3DD0877B7ACD319F 53CF0FCDDF1ACE5D BAE332EF72D123BC 41133749085019CF 2D24ACD2484DC460 E71F4D6C26DC5814 F5A2D057B87468FC 174949CF7E0BA72F 5D265A7F1636EB6A 2A1B91EEAEB6F48C A88DA2BCBD2F366D 9C12A5E07282BA4E 84878665F1615698 3F8244F34479869C 25DD783AF79E6D5B 158DD4E850B9FFCB 517AB69F6A3B15D5 6FFDF1B293F63BB3 E0233ADF70310BFC E2F96110BA3DF2CC AD9BF758F30D0780 126BF352E90371B4 E5E53A7C7D2E8117 E6889F01899E71ED 9175ADA632A93ABD CD2481642CEB0577 BC9E60533BB32A67 C1A5D188703C255A 37DBDCFFEB46390D C1432A5971B81189 E54BBF2B3433CF6D 44D4D0A25488419B EFED86C8A851E331 53961CD8B67551E4 FB5E5F9E537DC654 077C14CF53B1583F 7E285396EBB07C23 91FD3AC84409FFB7 048090C2CF2FF722 342636668907674A 2033C20BF1C730CE C526D29FC7D224B1 B781A97C07894B92 3B2964C2843BC220 37FBF2C86993870B 7199F7DB7A3B1350 F5661DE7ECA4AA96 77C3FED6AA3882BC
- Read the ciphertext. Strip whitespace: 2,832 hex characters = 1,416 bytes = 177 8-byte 3DES blocks.
- Derive the key. Password =
A858DE45F56D9BC9201210031421(name+title). Key = MD5(password) =97cab00769ec1d25267502d17ebe4818, used as a two-key 3DES key. - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding. The plaintext is 44 GUIDs as hex (shown below).
Decrypted: GUID list
1 7d5c0a4b-eace-37e3-8337-66181aab6472 2 abd93290-bc91-889f-8cf3-91aeaddc9c54 3 80c1473d-3bce-5167-8e96-16b0ecdfc916 4 6f272eca-0a24-832e-9aa2-b4ca658254e5 5 13007592-4d88-7fb5-9855-a2cc5fe1c2f6 6 395dd773-32da-6ad3-bb05-4bc0cdc20ab4 7 1bfba3ac-0518-7649-bb98-2e32b44ab171 8 883e94e6-d05e-2b5d-a41a-3fb3be14bf35 9 935b89c4-d22c-5e8f-aac7-83acb7034d76 10 b6ec05b6-c14b-6d2e-973a-b6c943d4cdff 11 266c258c-443c-7e8e-a020-216e3afac1a4 12 e659053e-d581-08c7-9a53-a09362d4e791 13 1f096301-b038-4f53-bfbf-11b142f28973 14 a4b85b8d-cf41-097d-838c-edb7621947a7 15 b9ab257a-6120-3f1e-8062-62a547cf3219 16 c999ff48-89da-0269-945d-e4a3fbf874ed 17 6713ab82-fa09-2904-beb5-09ece8733663 18 b9312854-c5b2-58fd-b981-4ff2ac9b0d14 19 435eb7ee-3090-7774-ba09-21c7b78ad662 20 170bb73d-25f9-3dad-bc8f-1278d3ab4b5e 21 6968ba6a-85f3-1ce0-ae3d-da2bca4c8631 22 24e854db-8519-826e-bd0e-939991e6e715 23 ff8e45e8-851a-1ddc-bf4b-769d090cf68c 24 4fcac5d7-86b5-39d2-96c1-53f7d0557b20 25 4f89bc32-4a2c-7165-abf4-24e8a56489d9 26 b4e803f8-7cc5-2f40-97f4-e9bf18ba3e10 27 4bc630f1-f410-6603-a3b0-e4b0ee14a009 28 3f1308b6-3f79-1fcb-bcd2-753384521c82 29 749488b9-9eed-6e3f-93d2-9cad6fce98b7 30 99dc796f-1c2d-4978-a47c-735047b7a18d 31 165b2b0f-242f-8815-b94c-c87636bb7f8f 32 c6293f5b-b12d-832a-8304-8f8b84f25e24 33 a9022e08-42c9-11ab-b002-08ddc7fc73d7 34 50904e86-2292-0117-907c-078b22aa665a 35 753d0679-600a-8ad1-8e86-4bd5045f3e0c 36 01f5f243-0185-341a-bed9-644b3c8c54fe 37 54d2b56c-e16b-3db5-b4bf-5db519d81e1a 38 8284cc84-8d5e-115a-a28a-0606ae288b32 39 926ea132-135c-67fc-96cf-ad3a1f8f94de 40 0bf01b53-a7d1-36e1-b144-6c4b10259eb3 41 6f380148-f404-2e11-9c98-5bd0639bf313 42 320fd2de-3892-6fc1-be37-a04bdf916ecd 43 ea7fb8fb-5e5e-7b2b-97fe-d85d189bddec 44 2e3b90c3-5308-3070-b876-5df36fbbfeb3
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
38587672567040302573181372616488108331632673. Exactly this sequence comes out ofnew Random(522).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. This post is draw 103 of Run 35 (seed 854,622,578):
new Random(854622578), Next(8,64) per post. The RNG predicts N = 44; the post has N = 44 ✓. The seed is the machine's uptime in ms when the app started (boot 2012-09-22 10:16–10:36). - Conclusion. Filler. The content is fully explained by the two RNGs.